Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
File: 00vPISevCy4KJGrkV0MEx653Fek.mft (raw, json)
Hash identifier: N/b4VW27Hu9e6ApmYZdIAxhlnEfJeA0A18cjJMgxjfs=
Subject key identifier: 49:08:22:FA:A7:D6:1C:A0:1D:5E:50:49:6D:5F:97:C2:9A:15:AD:94
Authority key identifier: D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
Certificate issuer: /CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Certificate serial: 019921B2108E57EC178AEADA7803C931C320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
Manifest number: 1672
Signing time: Sun 07 Sep 2025 01:02:21 +0000
Manifest this update: Sun 07 Sep 2025 01:02:21 +0000
Manifest next update: Mon 08 Sep 2025 01:02:21 +0000
Files and hashes: 1: 00vPISevCy4KJGrkV0MEx653Fek.crl (hash: Oi8ydkkpGFM4uycO/yClBp8NqSFwZqsofsJ09kX01wQ=)
2: SqjmPfaLrtBpjmBn0-LK2-XYK6E.roa (hash: oP41hXDxiX++ad4HH6tMbCxCouHbTfiMX6JPBOFqfjw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b2:10:8e:57:ec:17:8a:ea:da:78:03:c9:31:c3:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34bcf2127af0b2e0a246ae4574304c7ae7715e9
Validity
Not Before: Sep 7 01:02:21 2025 GMT
Not After : Sep 8 01:02:21 2025 GMT
Subject: CN=490822faa7d61ca01d5e50496d5f97c29a15ad94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:35:d8:4b:49:a2:f9:17:d9:27:92:57:9b:d7:
42:d6:89:96:91:f8:bf:a5:1c:da:f6:28:9f:9d:e1:
84:b7:e6:ac:4a:03:c4:13:92:61:d8:a0:f4:75:56:
87:d2:4b:3f:7b:6c:65:57:bc:c4:8c:64:98:88:0e:
08:91:6f:39:7d:3b:63:49:03:77:cc:4b:29:4f:a3:
c0:e9:17:d7:3c:d0:0f:f4:1f:e2:aa:4e:44:8c:05:
21:37:d3:88:a7:16:80:98:11:99:38:65:94:1f:1e:
48:af:fc:15:b5:16:b4:3d:3f:3b:b7:91:f4:7c:44:
14:71:d9:81:9a:af:2a:97:cd:56:ac:ed:a1:2c:63:
f4:7f:00:ab:a9:d3:c9:70:1a:4e:e9:f1:37:2b:b9:
17:bf:26:e2:81:d2:e9:2e:a9:9c:b4:53:a6:e9:ec:
92:3b:81:8c:48:15:5e:ce:32:7f:30:4c:98:25:07:
bb:ca:cb:86:df:93:4e:e9:44:91:31:82:63:1e:6c:
07:4d:2d:b9:c8:27:ed:ab:40:4a:35:e0:59:0f:d4:
9d:5d:56:2f:64:47:bd:be:b6:5a:1c:18:5d:e9:fe:
1b:30:32:8a:7c:ce:cd:23:ca:d7:76:23:94:6b:02:
cf:74:05:5f:76:94:e6:1c:44:0b:8d:0a:d7:87:7d:
f1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:08:22:FA:A7:D6:1C:A0:1D:5E:50:49:6D:5F:97:C2:9A:15:AD:94
X509v3 Authority Key Identifier:
keyid:D3:4B:CF:21:27:AF:0B:2E:0A:24:6A:E4:57:43:04:C7:AE:77:15:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00vPISevCy4KJGrkV0MEx653Fek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/0a4bc4-da4b-4f18-b4be-afc1ee4611a1/1/00vPISevCy4KJGrkV0MEx653Fek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:e0:a9:37:9c:a0:6c:c4:ef:a5:fa:c4:35:00:be:e4:07:ff:
eb:0f:98:05:4f:63:ad:d6:a2:75:fb:71:fa:fd:5c:1c:1a:74:
3b:61:5e:ae:b1:9b:a1:0d:9d:64:02:57:9d:ed:78:6e:df:fc:
24:4e:03:12:61:81:f4:44:b9:93:87:64:6f:d3:0c:ca:94:9a:
45:9a:34:3b:f5:75:af:fe:89:d2:bf:04:33:2f:6a:44:f3:81:
b0:70:29:ab:cf:73:b3:1a:d8:96:e1:e5:8a:c5:c5:b4:f9:d8:
c6:e1:eb:9c:68:c2:ed:7b:0d:40:41:6d:3d:7b:63:b2:81:fe:
f8:1e:35:88:ee:04:10:47:d6:b9:e6:3f:4a:c7:f1:0e:03:43:
4f:73:5e:5a:93:7a:40:bc:28:8f:e8:84:0b:36:3d:c0:f9:29:
b3:19:5d:8c:88:7f:fb:1a:be:5b:25:ea:b3:3b:2b:ad:72:9e:
53:b8:cb:e8:db:98:16:2b:ba:1d:5d:8f:29:7b:3b:bc:92:07:
27:39:2e:04:24:22:9e:90:f5:29:d7:f0:a9:35:4c:e5:30:c5:
e2:39:83:7c:4f:42:f0:1e:35:4e:d0:2b:3a:24:1f:70:4b:7b:
5e:6f:3a:6d:71:65:f4:0e:7c:5b:82:06:0b:0d:95:7f:30:21:
5f:01:34:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 10:11:39 2025 by rpki-client